Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YbvwQS6NFZQjbLlF8WDE-vyoMR8.roa
File: YbvwQS6NFZQjbLlF8WDE-vyoMR8.roa (raw, json)
Hash identifier: cbXzBXdtuTcNVEKUzwNBeuMRu0srLGaX3KbZb54xvrc=
Subject key identifier: 61:BB:F0:41:2E:8D:15:94:23:6C:B9:45:F1:60:C4:FA:FC:A8:31:1F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD4A8CCBBC7E832439BC86707E041
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YbvwQS6NFZQjbLlF8WDE-vyoMR8.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396605
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d4:a8:cc:bb:c7:e8:32:43:9b:c8:67:07:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61bbf0412e8d1594236cb945f160c4fafca8311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:7b:57:d8:62:c4:a9:d8:15:c6:2f:7d:ce:
99:3e:d2:e1:e8:18:57:12:91:cd:18:bc:22:77:57:
3c:92:54:24:2a:83:fd:90:d0:3b:6a:47:c8:f2:56:
21:ea:58:75:d1:5f:3a:6a:9a:01:38:83:a1:9a:d6:
40:a8:9e:c7:5a:0c:32:c2:54:25:88:b3:07:a0:bf:
aa:71:1a:d0:a5:9a:78:25:55:92:1f:c5:b9:7f:1b:
5d:0d:fe:93:54:a3:ed:1b:1b:98:55:ac:84:7e:c6:
e8:b5:b8:2e:66:09:77:6d:81:55:24:8d:d8:8a:fc:
5e:e3:7a:d0:7d:41:3f:df:13:30:f7:e9:9f:7d:83:
49:f0:7d:34:aa:e4:ac:6a:eb:f4:5a:95:ec:ed:17:
36:37:7a:7c:12:2c:9a:7f:87:0c:a8:91:a4:29:e5:
a6:7e:93:fd:6b:54:56:ed:7e:a3:39:c4:71:7d:22:
f1:4b:0a:58:62:e0:b6:5f:ca:e1:2c:ad:e3:ea:56:
eb:26:8d:b8:8a:bc:7d:0f:3e:ae:f3:d8:02:db:61:
8b:9e:26:5e:ec:b6:2b:da:78:d0:f3:81:fa:3e:af:
f9:7e:d3:6f:a3:83:1d:a5:46:a8:10:ea:2c:7f:2a:
1d:a2:eb:6e:17:61:ce:c4:bf:89:10:1b:1b:c6:c0:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:F0:41:2E:8D:15:94:23:6C:B9:45:F1:60:C4:FA:FC:A8:31:1F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YbvwQS6NFZQjbLlF8WDE-vyoMR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9c:d8:68:6b:40:60:42:97:c1:26:04:2b:26:19:a9:3d:d7:35:
59:70:a2:a7:86:f3:06:b7:07:f0:9f:94:6f:a0:24:af:7e:98:
5a:2d:f8:db:e0:2f:23:8d:80:85:7b:d3:45:ac:22:1a:43:37:
82:72:64:96:76:a4:71:6f:93:cd:4f:14:a0:a3:10:fe:96:f6:
49:4d:2f:29:69:b2:5d:49:a7:23:f5:b1:fc:32:94:14:d0:c3:
fa:15:e7:ae:ec:ea:cb:db:77:0a:20:89:9c:7d:4e:1b:72:87:
5a:e4:4e:da:a2:fe:54:54:9f:7d:bb:ab:a8:4c:4b:28:a3:98:
33:fe:2a:79:24:da:7f:03:99:12:c3:82:e7:54:68:6e:38:3f:
55:19:d1:5d:a4:92:88:17:df:ab:e0:97:03:d4:15:4c:81:28:
5f:77:cb:98:29:3d:cf:ec:3e:6f:a0:80:07:68:88:2e:c0:ce:
a8:4f:04:d9:67:45:cb:00:94:2a:a2:d2:66:41:02:b9:cc:86:
8d:a1:b4:24:53:62:a1:d9:9a:4a:d5:cf:5d:e2:a5:d1:29:51:
49:f8:86:49:f6:c3:a4:a8:4e:7b:69:01:61:8f:c7:6e:26:0e:
05:7e:0f:96:ad:4a:1e:c4:b4:3c:bf:e4:86:e1:30:ea:7a:83:
ba:b9:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:25 2025 by rpki-client